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CLAEMS 

1 . (previously amended) A method of managing virtual channels in a multicast session, the 
metliod comprismg: 

receiving a request from a requestor to join the multicast session for a time period; 
selecting a virtual channel from a plurality of virmal channels for communications by the 
requestor in response to a desired time period of communication by the requestor; 
forwarding a virtual channel key to the requestor; and 
forwarding the virtual channel key to all members of the virtual channel. 

2. (previously amended) A method according to claim 1, wherein each virtual chamiel of the 
plurality of virtual channels is associated with a different time duration. 

3. (original) A method according to claim 1. wherein no member can be in more than one virtual 
channel. 

4. (original) A method according to claim 1, fiirther comprising: 

distributing a data key to each multicast virtual channel. 

5. (original) The me&od according to claim 1, wherein all of the virtual chamiels reside within 
one domain. 

6. (original) The method according to claim 1, further comprising: 

rekeying the virtual channel key when membership of the virtual channel changes. 

7. (original) The method according to clarni 6, wherein in the act of rekeying at least one member 
is present in the virmal channel after the membership changes. 

8. (original) The method according to claim 2, associating an unlimited time dumtion with a 
virtual channel creating a permanent virtual channel. 
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.tocW2 wherein a member mayjoiti a virtual channel for 
9 (original) Themethodaccordingtoclaiin 2, wnerei 

les. than the virtual charmeV s full time duration, 
the vittual chaimel- 

Upper member expires, 
members expires. 

A- rr*^ /.Uim 12 wherein in the act of reassigning fiuther 
ic <-««ainan The method according to claim 1 A wneicsiu 

virmal cbanod key to aU memb«. of fl.e flreed vir«=l chapel, 
n. (p^vio^ly aoenaed) M apparatus «anasing visual chaa^a. . a .uMca. se^o. the 

period; 
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an assignment module for selecting a virtual channel from a plurality of virtual channels 
for communications by the requestor in response to a desired time period of communication by 

the requestor; 

^requestor forwardingmodule for forwaxdingavirtual channel key to the requestor; and 
a member forwarding module for forwarding the %drtual channel key to all members of 
the virtual channel- 

18. (original) The apparatus according to claim 17, further comprising: 

a virtual channel module which creates each virtual channel based on a time duration. 

19. (original) The apparatus according to claim 17, wherein the assignment module prevents a 
member ftom being in more than one virtual channel. 

20. (ori^al) The apparatus according to claim 17, further comprising: 

a data key distributor for distributing a data key to each multicast virtual channel 

21. (original) The apparatus according to claim 17, wherein the apparatus controls the multicast 
virtual channels which reside within one domain. 

22. (original) The apparatus according to claim 17, further comprising: 

a rekeying module for rekeying a virtual channel when membership of the virtual channel 

changes. 

23. (original) The apparatus according to claim 18, wherein the virtual channel module creates a 
peraianait virtual channel with an unlimited diuation. 

24. (original) The apparatus according to claim 18, wherein the receiver may receive a request to 
join a virtual channel for less than the viitaal channel's full time duration. 
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25. (original) The apparatus accoiding to claim 18, wherein the virtual channel module creates a 
lower and upper bounds for the virtual channel based on the time duration of the virtual channel. 

26. (original) The apparatus according to claim 18, further comprising: 

a reassignment module for reassigning time duration for a virtual channel if the virtual 
channel is freed. 

27. (oriiginal) The apparatus according to claim 18, further comprising: 

a reassignment module for reassigning time duration for all virmal channels if a virtual 

channel is freed. 

28. (original) The apparatus acconling to claim 27, wherein a virtual channel is freed when an 
upper member expires. 

29. (original) The apparatus according to claim 27, wherein a virtual channel is freed when all 
members expire. 

30. (original) The apparatus according to claim 27, wherein the reassignment module 
reconfigures the lower and upper bounds of all virtual channels. 

31. (original) The apparatus according to claim 22. wherein the rekeying module rekeys the 
virtual channel key to all members of a freed virtual channel. 

32. (previously amended) A computer program product for use on a computer system for 
managing virtual channels in a multicast session, the computer program product comprising a 
computer usable medium having computer readable program code thereon, tiae computer 
readable program code including: 

receiving a request from a requestor to join the multicast session for a time period; 
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computer code for selecting a virtual channel from a plurality of virtual chairoels for 
communications by the requestor in response to a desired time period of communication by the 
requestor; 

computer code for forwarding the virtual channel key to the requestor; and 
computer code for forwarding the virtual channel key to all members of the virtual 
channel. ^ 

33. (original) A computer program product according to claim 32, wherein each virtual channel is 
associated with a time dxiration. 

34. (original) A computer program according to claim 32. wherein no member can be in more 
than one virtual channel. 

35. (original) A computer program product according to claim 32, further comprising: 

computer code for distributing a data key to each multicast virtual channel. 

36. (original) The computer program product according to claim 32, wherein all of the virtual 
channels reside within one domain. 

37. (original) The computer program product according to claim 32, fiirther comprising: 

computer code for rekeying the virtual channel key when membership of the virtual 
channel changes. 

38. (original) The computer program product according to claim 33, fiirther comprising: 

computer code for associating an unlimited duration with a virtual channel creating a 
permanent virtual chaimel. 

39. (original) The computer program product according to claim 33, wherein a member may join 
a virtual channel for less than the virtual channel's full time duration. 
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40. (original) The computer program prodiict according to claim 33. further comprising: 

computer code for creating a lower and upper bounds for the virtual channel based on the 
time duration of the virtual channel. 

41. (original) The computer program product according to claim 33, further comprising: 

computer code for reassigning time duration for a virtual channel if a virtual channel is 

freed. 

42. (original) The computer program product according to claim 33, fiirther comprising: 

computer code for reassigning time duration for all virtual channels if a virtual channel is 

freed, 

43. (original) The computer program product according to claim 41. wherein a virtual channel is 
fieed when an upper member expires. 

44. (original) The computer program product according to claim 41, wherein a virtual channel is 
freed when all members expire. 

45 . (original) The computer program product according to claim 42, wherein the computer code 

for reassigning, further comprises: 

computer code for reconfiguring the lower and upper bounds of all virtual channels. 

46. (original) The computer program product according to claim 37. further comprising computer 
code for rekeying a virtual channel key only to the members of a freed virtual channel. 

47. (previously amended) A method of aeating a secure muhicast session, the multicast session 
having a plurality of virtual channels, at least one of the virtual channels having a member, the 
method comprising: 

associating each member with one of the plurality of multicast virtual channels based on a 
desired communication time of the each member; 
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distributing virtual channel keys to the members, each member receiving one virtual 
channel key based upon their associated virmal channel; and 

rekeying the virtuid channel key when membership of the virmal channel changes. 

48. (original) A method according to claim 47, wherein the virtual channel key is sent in a 
unicast session to each member. 

49. (original) A method accoxding.to claim 47, wherein each virtual channel is associated with a 
time duration, 

50. (original) A method according to claim 47, wherein no member can be in more than one 
virtual channeL 

51. (original) A method according to claim 47> further comprising: 

distributing a data key to each multicast virtual channel. 

52. (original) The method according to claim 47, wherein all of the virtual channels reside within 
one domain. 

53. (original) The method according to claim 47, wherein in the act of rekeying at least one 
member is present in the virtual channel after the membership changes. 

54. (original) The method according to claim 48, associating an unlimited duration with a virtual 
channel creating a permanent virtual channel. 

55. (original) The method according to claim 48, wherein a member may join a virtual channel 
for less than the virtual channel's full time duration. 

56. (original) The method according to claim 48, further comprising 
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virtual channel 

57 (original) A method according to claim 48, foither comprising: 

reassigning thne duration for a virtual channel if a virtual channel is freed. 

58 (original) A method according to claim 48, further comprising: 

reassigning time duration for all virtual channels if a virtual channel is freed. 

59.(original)Ilie method according to claim57,whereinavirtualchamiel is fre^ 
Upper member expires. 



60. (original) The 
members expire. 



„.ethod according to claim 57. wherein a virtual channel is freed when aU 



61 (original) The method according to claim 58. wherein in the act of reassigning further 
comprises the step of reconfiguring the lower and upper bounds of all virtual channels. 

62. (Original) The method according to claim 58, wherein only the freed virtual channel rekeys 
the virmal channel key to all raemheis of the freed virtual channeL 

63 (previously amended) An apparatus for creating a secure multicast session, the multicast 
session having a pluraUty of virtual channels, at least one virtual channel having a member, the 
method comprising: 

an associator module for associating each member with one of the plurality of mulucast 
virtual chamiels based on a desired communication time period of the each member; 

a distribution module for distributing virtual channel keys to die members, each member 
receiving one virtual channel key based upon their associated virtual channel; and 

a rekeying module for rekeying the virtual channel key when membership of the virtual 

channel changes. 
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channel key is Mot m a unicast session to each member. 

65 (original) me apparatus according to claim 63. fmther comprising: 

!L.lcha.nelmod.lewhichaea..se,chvi^lcha,me.ba,edona,mred«r,t,o. 

66. (original) apparatus according to claim 63. whe^n the assi^en, module p«ven,s a 
member from bdng in more than one virtual channel. 

67 (Original) The apparatus according to claim 63. further comprising: 

a dau key disrtbutor fbr dism-buhng a data key to each multicast vbtual channel. 

.Moriginal)lheapp.^saccording to clairn 63. whereinthemuldcas. virtual channels r^^ 

within one doniaitL 

J- ... whprein the virtual chamiel module creates a 

69. (original) The apparatus according to claim 65, wherem tne vinua. 

permanent virtual channel with an unlimited duration. 

70 The apparatus according to claim 65, Wherein the n^ceiver may r^^^^^ 
Join a virtual channel for less than the virtual channel's full time duration. 

71 (original) Tte apparatus according to claim 65, wherem the virtual channel module creates a 
lower andupper bounds for the virmal chamiel based on the time durationof^evirt^ch^^^^ 

72 (original) The apparatus according to claim 65, further comprising: 

a reassignment module for reassignins time duration for a virtual channel if the v^al 

channel is fireed. 

73. (original) The apparatus accoiding to claim 65. &rther comprising: 
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a reassignmeirt module for reassigning time duration for all virtual channels if a virtual 
channel is freed, 

74. (original) The apparatus according to claim 72, v^herein a virtual channel is freed when an 
upper member expires. 

75. (original) The apparatus according to claim 72, wherein a virtual channel is freed when all 
members expire, 

76. (original) The apparatus according to claim 73, wherein the reassignment module 
reconfigures the lower and upper bounds of all virtual channels. 

77. (original) The apparatus according to claim 63, wherein the rekeying module rekeys the 
virtual charmel key to all members of a freed virtual channel. 

78. (previously amended) A computer program product for use on a computer system for creating 
a secure multicast session, the multicast session having a plurality of virmal channels, at least one 
virtual channel having a member, the computer program product comprising a computer usable 
medium having computer readable program code thereon, the computer readable program code 
including: 

computer code for associating each member with one of the plurality of multicast virtual 
channels based on a desired communication time period for the each member; 

computer code for distributing virtual channel keys to the members, each member 
receiving one virtual channel key based upon their associated virtual channel; and 

computer code for rekeying the virtual channel key when membership of the virtual 
channel changes. 

79. (original) The apparatus according to claim 78, wherein in distribution module the virtual 
channel key is sent in a unicast session to each member. 
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80. (original) A computer program product acconiing to claim 78, wherein each virtual channel is 

associated with a time duration. 

8 1 . (original) A computer program product according to claim 78, wherein no member can be in 
more than one virtual channel. 

82. (original) A computer program product according to claim 78. further comprising: 

computer code for distributing a data key to each multicast virtual channel. 

83. (original) The computer program product according to claim 78. wherein all of the virtual 
channels leside within one domain. 

84. (original) The computer program product according to claim 80, fiirther comprising: 

computer code for associating an unlimited duration with a virtual channel creating a 
permanent virtual channel. 

85. (original) The computer program product according to claim 80. wherein a member may join 
a virtual channel for less than the virtual channel's Ml time duration. 

86. (original) The computer program product according to claim 80, further comprising 

computer code for creating a lower and upper bounds for the virtual channel based on the 
time duration of the virtual channel. 

87. (original) The computer program product acconiing to claim 80, further comprising: 

computer code for reassigning time duration for a virtual channel if a virtual channel is 

freed. 

88. (original) The computer program product according to claim SO, further comprising: 

computer code for reassigning time duration for all virtual channels if a virtual channel is 

freed. 
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89. (original) The computer program product according to claim 81, wherein a virtual channel is 
freed when an upper member expires. 

90. (original) The computer program product according to claim 8 1 , wherein a virtual channel is 
freed when all members expire. 

91. (original) The computer program product according to claim 82, wherein the computer code 
for reassigning further comprises computer code for reconfiguring the lower and upper bounds of 
all virtual channels. 

92. (original) The computer program product according to claim 80, further comprising computer 
code for rekeying a virtual channel key only to the members of the freed virtual channel. 
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